ATM security system

ABSTRACT

A security system useful for monitoring an automated teller machine (ATM) includes a camera that provides images of at least selected portions of the ATM. A controller automatically determines whether a difference between a reference image of the ATM and a subsequently acquired image from the camera indicates an alteration to the ATM. One example provides the ability to detect whether a skimming reader has been placed adjacent a card receiving slot. A disclosed example includes acquiring a plurality of reference images corresponding to different lighting conditions and using an appropriate one of the reference images based upon a lighting condition or time of day associated with a subsequently acquired image.

BACKGROUND OF THE INVENTION

This invention generally relates to security systems. More particularly,this invention relates to security systems useful for monitoringpotential alterations of automated teller machines.

Automated teller machines (ATMs) have become well known and widely used.ATMs allow individuals twenty-four hour access to their bank accounts toconduct a number of transactions. One advantage to ATMs is theirconvenience to bank customers. Another advantage is the ability forbanks to have transactions automated, which presents a cost savings tothe bank.

One feature of known ATMs is that they require a sufficient amount ofinformation regarding a bank customer before allowing a transaction tobe completed. The conventional way of providing such information to theATM is by inserting a card that includes a magnetic strip containingcustomer information. Maintaining such information confidential andsecure has recently become problematic.

Skimming readers have been developed that are placed over a card readerslot on an ATM. These skimming readers read the magnetic strip on thecard as a bank customer inserts their card for purposes of conducting atransaction with the bank. The skimming reader scans the magnetic stripsof cards inserted into the card reader slot and gathers the informationregarding each individual and their account.

By using a hidden camera or a secretly located individual, thecustomer's access code (i.e., a manually entered PIN) can be gathered.That information combined with the information gathered by the skimmingreader allows an unauthorized individual to gain unauthorized access tothe individual's bank account or accounts and make illegal fundwithdrawals.

There is a need for a system that protects against such skimming. Thisinvention addresses that need.

SUMMARY OF THE INVENTION

An exemplary disclosed security system for monitoring an ATM includes acamera that provides at least one reference image of at least a portionof the ATM. The camera also provides at least one subsequently acquiredimage of the same portion of the ATM. A controller automaticallydetermines whether a difference between the reference image and thesubsequently acquired image indicates an alteration to the ATM.

In one example, the controller provides an indication of an alertcondition when a difference between the reference image and thesubsequently acquired image indicates an alteration to the ATM.

One example includes making sure that there is no motion in the vicinityof the ATM that would result in a difference between the reference imageand the subsequently acquired image to avoid a false positive detectionof a potential alteration of the ATM. One example includes a motiondetector for providing an indication of such motion.

One example includes acquiring a plurality of reference images, eachcorresponding to a different condition that may affect the appearance ofthe ATM in an image of the ATM. One example includes acquiring differentreference images for different times of day. Another example includesacquiring different reference images corresponding to different lightingconditions that may affect shadowing, for example. The controller in oneexample determines which reference image corresponds to a conditionassociated with the subsequently acquired image and uses the appropriatereference image for determining whether there may have been analteration to the ATM. In another example, the controller uses thedifferent reference images to rule out any problem areas from the fieldof vision of the camera or the subject ATM.

The various features and advantages of this invention will becomeapparent to those skilled in the art from the following detaileddescription of a currently preferred embodiment. The drawing thataccompanies the detailed description can be briefly described asfollows.

BRIEF DESCRIPTION OF THE DRAWING

FIG. 1 schematically illustrates selected portions of an examplesecurity system for monitoring an automated teller machine.

DETAILED DESCRIPTION

FIG. 1 schematically shows one example system 20 for providing securityat an automated teller machine (ATM). An ATM interface 22 isschematically shown including a card reader portion 24 for receiving acard that includes a readable strip of information. In one example, acard having a magnetic strip encoded with appropriate information allowsan individual to gain access to a bank account after inserting the cardinto the card reader portion and then entering a personal identificationnumber (PIN).

A camera 26 has a field of vision arranged to view the ATM interface 22,or at least portions of it, including the card reader portion 24. In oneexample, the camera 26 is a CCTV camera that operates in a known mannerto provide digital images of the ATM interface 22.

A controller 30 includes an image processing module for gatheringinformation regarding the ATM interface 22 and processes thatinformation in a manner that allows for detecting whether a skimmingreader may have been appended to the ATM interface or some otheralteration has been made. In one example, the image processing moduleuses known digital video processing and analysis techniques forautomatically making such a determination.

In the illustrated example, a database 32 of reference images acquiredby the camera 26 can be utilized by the controller 30. Each referenceimage shows the ATM interface 22 when it is in a known condition. In oneexample, the database 32 includes reference images of the ATM interface22 under various lighting conditions so that a full appreciation of thevarious shadowing and other lighting effects that may change during thecourse of a day, for example, are maintained and available for thecontroller 30. In one example, the reference image information is storedin connection with an associated time of day or range of times duringwhich that particular image is an acceptable reference for the expectedlook of the ATM interface.

In one example, the controller 30 goes through a learning phase todetermine whether any portions of reference images are prone to changesor unclarities that would be problematic when later using the referenceimages. For example, one side of an ATM may always appear dark becauseof shadowing. The controller 30 in one example learns where such areaswithin an image occur and rules out a corresponding portion of imagesprocessed to determine a condition of the ATM.

The camera 26 remains focused on the appropriate portions of the ATMinterface 22 and periodically acquires an image 34 of the ATM interface22. The image processing module automatically compares a most recentsubsequently acquired image with an appropriate reference image from thedatabase 32. Whenever there is a discrepancy or difference between asubsequently acquired image and an appropriate reference image, thealert is provided to an alert module 36. In one example, the alertmodule 36 provides an indication to an individual that there is asuspicious condition of a particular ATM.

In one example, the reference image and the most recent subsequentlyacquired image that instigated the alert are presented on a display 38associated with the alert module 36 so that an individual can manually,visually analyze and compare the images. The individual is then able todecide whether the difference indicates that some alteration to the ATMmay have been made, such as placing a skimming reader over the cardreader portion 24.

In one example, the subsequently acquired images 34 used for determininga current condition of the ATM are only collected under staticconditions to avoid having the presence of an individual in front of theATM interface 22 being interpreted as a change to the interface thatwould otherwise generate a potential alert. The illustrated exampleincludes a motion detector 40 for providing an indication of motion inthe vicinity of the ATM interface 22. Any known motion detector such asa pyroelectric sensor could be used. In one example, the motion detector40 is an integrated part of the camera 26. In another example, aseparate motion detector 40 is used.

The controller 30 uses information from the motion detector 40 todetermine whether there is motion in the vicinity of the ATM interface22 at a time associated with a subsequently acquired image. In oneexample, the controller 30 only uses subsequently acquired images thatoccur under static conditions when there is no motion as indicated by amotion detector, for example.

The example system 20 allows for recognizing when any unauthorizedchange has been made to an ATM interface. One advantage of such anarrangement is that there is an ability to detect when a skimming readerhas been placed over a card slot 24, which would otherwise beunrecognized by the average bank customer. One particular advantage tothe disclosed example is that it has the ability to collect a variety ofreference image data to address various lighting conditions and thedifferent shadowing that may occur on an ATM interface at differenttimes of day, for example. Having a more accurate, more completedatabase of reference images allows for more accurate detection ofpotential alert situations.

The preceding description is exemplary rather than limiting in nature.Variations and modifications to the disclosed examples may becomeapparent to those skilled in the art that do not necessarily depart fromthe essence of this invention. The scope of legal protection given tothis invention can only be determined by studying the following claims.

1. A method of monitoring an ATM, comprising the steps of: automaticallydetermining whether a difference between at least a portion of areference image of at least a portion of the ATM and a correspondingportion of a subsequently acquired image of the portion of the ATMindicates an alteration to the ATM; using a learning phase to determinewhether the reference image has any portion that would be unreliablewhen later comparing the subsequently acquired image to the referenceimage; and ruling out a corresponding unreliable portion of thesubsequently acquired image that is processed to determine a conditionof the ATM.
 2. The method of claim 1, comprising providing an indicationof an alert condition when the difference indicates an alteration to theATM.
 3. The method of claim 1, comprising providing the reference imageand the acquired image to a display device for visual inspection of theimages for confirming that the images indicate an alteration to the ATM.4. The method of claim 1, comprising determining whether the alterationincludes a skimming reader placed over a card receiving slot of the ATM.5. The method of claim 1, comprising determining whether the differencebetween the reference image and the subsequently acquired image isassociated with some movement near the ATM.
 6. The method of claim 5,comprising detecting motion in the vicinity of the ATM at a timecorresponding to the subsequently acquired image and determining that aresulting difference between the reference image and the subsequentlyacquired image does not indicate an alteration to the ATM.
 7. The methodof claim 1, comprising obtaining a plurality of reference imagescorresponding to a plurality of different conditions; determining whichof the conditions is associated with the subsequently acquired image;and using the reference image corresponding to the associated conditionfor determining whether the difference indicates an alteration to theATM.
 8. The method of claim 7, wherein the conditions comprise times ofday and the method includes determining a time of day associated withthe subsequently acquired image.
 9. The method of claim 7, wherein theconditions comprise lighting conditions and the method includesdetermining an expected one of the lighting conditions associated withthe subsequently acquired image.
 10. The method of claim 1, comprisingobtaining the reference image when the ATM is in a known condition; andautomatically determining whether there is a difference between thesubsequently acquired image and the reference image.
 11. A securitysystem for monitoring an ATM, comprising: a camera that provides atleast one reference image of at least a portion of the ATM and at leastone subsequently acquired image of the portion of the ATM; and acontroller that automatically determines whether a difference between atleast a portion of the reference image and a corresponding portion ofthe subsequently acquired image indicates an alteration to the ATM; thecontroller using a learning phase to determine whether the referenceimage has any portion that would be unreliable when later comparing thesubsequently acquired image to the reference image; and the controllerruling out a corresponding unreliable portion of the subsequentlyacquired image that is processed to determine a condition of the ATM.12. The system of claim 11, wherein the controller provides anindication of an alert condition when the difference indicates analteration to the ATM.
 13. The system of claim 11, comprising at leastone display and wherein the controller communicates with the displaydevice such that the display provides a visual representation of thereference image and the subsequently acquired image for manual, visualinspection of the images for confirming that the images indicate analteration to the ATM.
 14. The system of claim 11, comprising at leastone motion detector in the vicinity of the ATM for providing anindication of any motion near the ATM at a time corresponding to thesubsequently acquired.
 15. The system of claim 14, wherein thecontroller uses the indication from the motion detector for determiningwhether there was movement in the vicinity of the ATM at a timeassociated with the subsequently acquired image.
 16. The system of claim15, wherein the controller only uses a subsequently acquired image froma time when there is no movement in the vicinity of the ATM.
 17. Thesystem of claim 11, comprising a database of a plurality of referenceimages corresponding to a plurality of different conditions and whereinthe controller uses one of the reference images corresponding to acondition associated with the subsequently acquired image fordetermining whether the difference indicates an alteration to the ATM.18. The system of claim 17, wherein the conditions comprise times of dayand the controller determines a time of day associated with thesubsequently acquired image.
 19. An ATM machine, comprising: a cardreceiver for receiving at least a portion of a card that includes areadable portion that provides information regarding at least oneaccount associated with the card; a camera arranged to provide an imageof at least the card receiver; and a controller that uses a referenceimage from the camera and determines whether a difference between atleast a portion of the reference image and a corresponding portion of asubsequently acquired image from the camera indicates tampering with thecard reader; the controller using a learning phase to determine whetherthe reference image has any portion that would be unreliable when latercomparing the subsequently acquired image to the reference image; andthe controller ruling out a corresponding unreliable portion of thesubsequently acquired image processed to determine a condition of theATM.
 20. The ATM machine of claim 19, wherein the reference imagecorresponds to a known condition of the ATM and the controllerperiodically uses subsequently acquired images from the camera andautomatically determines whether there is a difference between a mostrecent subsequently acquired image and the reference image.